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Intellectual Property Rights 



IPRs essential or potentially essential to the present document may have been declared to ETSI. The information 
pertaining to these essential IPRs, if any, is publicly available for ETSI members and non-members, and can be found 
in SR 000 314: "Intellectual Property Rights (IPRs); Essential, or potentially Essential, IPRs notified to ETSI in respect 
of ETSI standards", which is available free of charge from the ETSI Secretariat. Latest updates are available on the 
ETSI Web server (http://www.etsi.org/ipr). 

Pursuant to the ETSI IPR Policy, no investigation, including IPR searches, has been carried out by ETSI. No guarantee 
can be given as to the existence of other IPRs not referenced in SR 000 314 (or the updates on the ETSI Web server) 
which are, or may be, or may become, essential to the present document. 



Foreword 



This Technical Specification (TS) has been produced by the Special Mobile Group (SMG). 

In analogy with CCITT Recommendations 1.130, the first stage of the following three level structure is used to describe 
the telecommunications services as provided by European public telecommunications operators: 

Stage 1 is an overall service description, from the service subscriber's and user's standpoint; 

Stage 2 identifies the functional capabilities and information flows needed to support the service described 

in stage 1 ; and 

Stage 3 defines the signalling system protocols and switching functions needed to implement the service 

described in stage 1. 

The present document details the stage 1 aspects (overall service description) for the support of a Mobile Station 
Application Execution Environment (MExE). 

The contents of the present document are subject to continuing work within SMG and may change following formal 
SMG approval. Should SMG modify the contents of the present document it will then be re-released by ETSI with an 
identifying change of release date and an increase in version number as follows: 

Version 7.x.y 

where: 

7 GSM Phase 2+ Release 1998 

y the third digit is incremented when editorial only changes have been incorporated in the specification; 

X the second digit is incremented for all other types of changes, i.e. technical enhancements, corrections, 
updates, etc. 
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Scope 



The present document defines the stage one description of the Mobile Station Application Execution Environment 
(MExE). Stage one is an overall service description, primarily from the subscriber's and service providers' points of 
view, and does not deal with the details of the human interface itself. 

The present document includes information applicable to network operators, service providers and terminal, switch and 
database manufacturers. 

The present document contains the core requirements for a Mobile Station Application Execution Environment (MExE) 
which are sufficient to provide a complete service. 

It is highly desirable however, that technical solutions for a Mobile Station Application Execution Environment (MExE) 
should be sufficiently flexible to allow for possible enhancements. Additional functionalities not documented in the 
present document may implement requirements which are considered outside the scope of the present document. This 
additional functionality may be on a network-wide basis, nation-wide basis or particular to a group of users. Such 
additional functionality shall not compromise conformance to the core requirements of the service. 




Scope of 
this TS 



Figure 1 : Scope of this TS 

As indicated in Figure 1, the scope of the present document encompasses the MExE functionality in the MS, interaction 
with the MExE service environment. The MExE service environment is not necessarily restricted to the PLMN, and 
nodes providing MExE services (i.e. MExE servers) may also exist outside the PLMN. Aspects of the support provided 
by MExE servers within the MExE service environment (such as charging aspects, security level classification etc.) are 
covered by the present document, but not the MExE servers themselves. 

MExE requirements are considered to be applicable to both GSM and UMTS systems. 
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References 



The following documents contain provisions which, through reference in this text, constitute provisions of the present 
document. 

• References are either specific (identified by date of publication, edition number, version number, etc.) or 
non-specific. 

• For a specific reference, subsequent revisions do not apply. 

• For a non-specific reference, the latest version applies. 

• A non-specific reference to an ETS shall also be taken to refer to later versions published as an EN with the same 
number. 

• For this Release 1998 document, references to GSM documents are for Release 1998 versions (version 7.x.y). 

[1] GSM 01.04 (ETR 350): "Digital cellular telecommunications system (Phase 2+); Abbreviations 

and acronyms". 

[2] GSM 10.57: "Digital cellular telecommunications system (Phase 2+); Project scheduling and open 

issues; Mobile Station Execution Environment (MExE)". 



3 Definitions and abbreviations 

3.1 Definitions 

For the purposes of the present document, the following terms and definitions apply. 

applet: a small programme that is intended not to be run on its own, but rather to be embedded inside another 
application 

application: MExE information in the form of software, scripts, applications, associated resources (e.g. libraries) and/or 
data 

content: data and/or information associated with, or independent of, a particular application which may be presented to 
or collected from a user 

MExE Classmark: a MExE Classmark identifies a category of MExE MS supporting MExE functionality with a 
minimum level of processing, memory, display and interactive capabilities. Several MExE Classmarks may be defined 
to differentiate between the functionalities offered by different MExE MSs. A MExE application or applet defined as 
being of a specific MExE Classmark indicates that it is supportable by a MExE MS of that Classmark. 

MExE server: a node supporting MExE services in the MExE service environment 

MExE service: a service enhanced (or made possible) by MExE technology 

MExE service environment: Depending on the configuration of the PLMN, the operator shall be able to offer support 
to MExE services from traditional GSM nodes, IN nodes, operator-specific nodes, operator-franchised nodes and 
services provider nodes, together with access to nodes external (i.e. vendor-specific) to the PLMN depending on the 
nature of the MExE service. These nodes are considered to constitute the MExE service environment. The MExE 
service environment shall support direct MExE MS to MExE MS interaction of MExE services. 
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MExE service provider: an organisation which delivers MExE services to the subscriber. This is normally the PLMN 
operator, but could be an organisation with MExE responsibility (which may have been delegated by the PLMN 
operator). 

MExE subscriber: the owner of a GSM subscription who has entered into an agreement with a MExE service provider 
for MExE services. Access to MExE services though other types of networks is out of scope of this specification. 

subscriber: the term subscriber in the context of this TS refers to a MExE subscriber 

user: the user of an MExE MS , who may or may not be the subscriber. 

3.2 Abbreviations 

For the purposes of the present document, the following abbreviations apply: 

API Application Programming Interface 

CS Circuit Switched 

FES For Further Study 

IN Intelligent Network 

ME Mobile Equipment 

MExE Mobile Station (Application) Execution Environment 

MMI Man Machine Interface 

MS Mobile Station 

NO Network Operator 

PLMN Public Land Mobile Network 

SIM Subscriber Identity Module 

SP Service Provider 

Further GSM related abbreviations are given in GSM 01.04 [1]. 



Description 



MExE provides a standardised execution environment in an MS, and an ability to negotiate its supported capabilities 
with a MExE service provider, allowing applications to be developed independently of any MS platform. The MS 
(consisting of the ME and SIM) can then be targetted at a range of implementations for MExE from small devices with 
low bandwidth, limited displays, low processor speeds, limited memory, MMI etc., to sophisticated with a complete 
MExE execution environment. 

The introduction of MExE execution environment into MSs is a significant step forward in their evolution. The ability of 
MSs to support MExE applications represents an extension of MSs' capabilities. In order to allow current and future 
technologies to exploit and benefit from this, a standardised means of negotiating the MSs' and network's capabilities is 
supported. This negotiation will permit the mutual exchange of capabilities between the MS and the MExE server, and 
possibly include the service profile of the user and capabilities of the network. The negotiation may take place at service 
initiation, or on a dynamic basis. 

A network can be a transport bearer for the negotiation, interaction and transferring of applications, applets and content 
with the MS, however it need not necessarily be the provider of the MExE services with which the MS's execution 
environment is interacting with. The network may also be the intermediary between two MSs which are engaged in a 
MExE service with each other, with the network effectively supplying the "pipe" and not playing a MExE role in the 
connection. 

Network nodes, nodes external to the network, or even MSs may be the entities which interacts with the MS's execution 
environment. 
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5 Compatibility of IVIExE IVIS's and applications 

5.1 MExE classmarks 

Given the wide ranging hardware capabilities of MExE MSs, together with the development of MExE applications and 
applets, a MExE classification shall be supported to determine their respective capability and compatibility. The MExE 
classification shall apply both to MSs and applications and applets. 

The objective is to: 

classify the capabilities of a MExE MS to support MExE applications and applets; and 

identify the class of MExE MS on which a MExE application and applet may be supported. 

The concept of a MExE Classmark is introduced to manage the MExE MS and MExE application and applet 
classification and compatibility. The MExE Classmark is distinct and unrelated to the existing GSM MS Classmark. The 
use of MExE Classmarks shall be supported during the capability negotiation between the MExE service provider and 
the MExE MS. 

5.2 MS MExE classmarks 

A given MExE Classmark shall identify a category of MExE MS supporting MExE functionality with a minimum level 
of processing, memory, display and interactive capabilities. 

Small devices may be considered to be MExE Classmark 1 devices, and contemporary sophisticated devices may be 
considered to be MExE Classmark 2 devices. The minimum level of capabilities for each MExE Classmark is beyond 
the scope of this Stage 1 service description. As MS development evolves and more sophisticated devices (or indeed 
simpler devices) become available, further MS MExE Classmarks shall be definable to identify MS's capable of 
supporting improved (or additional) MExE functionality. 

A given MExE MS Classmark identifies support by a MExE MS for a defined level of MExE functionality, but does not 
necessairly imply support of other levels of MExE Classmark. A MExE MS may also support multiple MExE 
Classmarks. 

5.3 Application and applet MExE classmarks 

MExE applications and applets will be developed to execute in one or more classes of MExE MS's. In order for MExE 
applications and applets to be properly supported by a MExE MS, the application and applet shall identify the minimum 
functional capabilities required of a MExE MS, as defined by the MS's MExE Classmark. 

MExE applications and applets shall be designated by the same classes of MExE MS's on which they may be executed. 
Examples of the classification of MExE applications and applets are as follows :- 

MExE Application "A" is defined as a MExE Classmark 1 application; 

the application is identified as suitable for execution on MExE Classmark 1 MS's only. 
MExE Application "B" is defined as a MExE Classmark 1 and Classmark 2 application; 

the application is identified as suitable for execution on MExE Classmark 1 and Classmark 2 MS's only. 
MExE Application "C" is defined as a MExE Classmark 2 and Classmark 3 application; 

the application is identified as suitable for execution on MExE Classmark 2 and Classmark 3 MS's only. 

MExE Application "D" is defined as a MExE Classmark 1, Classmark 2 and Classmark 3 application; 

the application is identified as suitable for execution on MExE Classmark 1, Classmark 2 and Classmark 3 
MS's. 
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If a MExE application or applet is capable of being supported by other classes of MExE MS's (with reduced or 
enhanced capabilities), it is the responsibility of the MExE service provider to re-classify the MExE application or 
applet accordingly. 

MExE applications and applets defined by a MExE service provider to a given class of MExE MS, shall be supportable 
by all MExE MS's of that class regardless of MExE MS manufacturer. MExE applications and applets shall operate on 
differing MExE MS of the same MExE MS class without modification. 

It shall be possible for MExE service providers to make the same MExE applications and applets available in the 
network for different classes of MExE MS. It is desirable that applications and applets are backward compatible within a 
given technology and for a given MS Classmark; however such backward compatibility is out of scope of this 
specification. 



6 General MExE requirements 

6.1 High level MExE requirements 

The high level requirements of MExE are as follows: 

the means for MExE service provider specific services to be supported by all mobiles of a particular class (i.e. 
the need for a common set of APIs and development tools), and accessible across a range of networks; 

- provide the user with a more sophisticated user interfaces (e.g. browser-like) with a rich variety of MMI concepts 
to control and invoke services (i.e. softkeys, icons, voice recognition etc.); 

the user's and MExE service providers capability to control the "look and feel" of applications and applets; 

the ability of the user to personalise the user interface; 

the ability of the user to personalise services; 

- provide support of a wide variety of applications and applets; 

- provide the means for MExE service providers to authenticate MExE subscribers; 

- provide the user access to Internet and Intranet based applications and applets (via both standard Internet and 
Wireless optimised protocols); 

the means to transfer applications, applets and content automatically or on demand to a MExE MS from a MExE 
service provider, and upgrade existing applications across the GSM network; 

the means to support direct MExE MS to MExE MS interaction of MExE services; 

the need for an inherent security architecture such that both the MExE MS and MExE server sides of a 
connection are authenticated (possibly by a brokerage server), and have access to a range of encryption and 
security functions in order to maintain the security and integrity of the GSM network. The MExE service 
provider shall maintain security of subscribers personal data and GSM network data, with all aspects relating to 
GSM security being centred on the SIM; 

the ability for the MExE service provider to charge subscribers for MExE service provider provided MExE 
services, at connect time, when downloading, or on usage; 

the means for MExE service provider specific applications and applets on the MExE MS to communicate with 
other GSM network nodes (e.g. a SCP); 

the ability to provide information to MExE service providers (e.g. location information of MS' for use with 
location dependent services); 



£75/ 



(GSM 02.57 version 7.1 .0 Release 1 998) 1 ETSI TS 1 01 741 V7.1 .0 (1 999-08) 

- the means for MExE service providers and their applications and applets to determine MExE MS capabilities 
(i.e. MExE Classmark, technology, supported bearers according to network capabilities and GSM subscription 
etc.). (This shall be used by MExE servers to adapt application and applet transfer to MExE MS capabilities, and 
shall be used by applications and applets whilst running to adapt their behaviour to the MS's capabilites.); 

the opportunity for MExE service providers to apply expertise and software developed for other platforms; 

- provision of APIs and tools to develop MExE services which are applicable for MExE MS'; 

the means for the user to manage (i.e. identify version, delete, modify, save etc.) the applications, applets and 
content on the MExE MS; 

the means for the user to control acceptance (i.e. by Security Level, level of trust etc.) of applications, applets and 
content transferred to the MExE MS. (It shall be possible for the user to finely control a trusted application or 
applet's access rights on the MExE MS, such as reading/writing/deletion of files stored on the MExE MS.). 

Some of the above requirements are subsequently elaborated. 

6.2 Requirements description from the user's standpoint 

MExE provides an improvement in the capabilities of an MS, as well as an extended range of services available to the 
user from, or via, the network. The user shall have 

user interface configuration management; and 

service management; 

of the services offered to him by MExE. 

6.2.1 User interface configuration management 

User interface configuration management refers to the behaviour of the MExE MS, and the ability of the user to modify 
the MExE MS to behave in the manner he is accustomed to, or wishes the MExE MS to, present itself to the user. It does 
not refer to the services which interact with the network, but the way in which the MExE MS interacts with the user. 

Users expect MExE MSs to offer an increasing range of capabilities which need not be ubiquitously present on each 
MExE MS, depending on the technological limitations of the MExE MS. The user shall be able to manage the user 
interface configuration of the MExE MS. For example, some user's may require a voice-controlled MMI, whilst others 
may have the need for a specialised presentation on the MExE MS display or preset function keys regardless of the 
application or applet which is running. Management of the user interface configuration will permit a user to move from 
MExE MS to MExE MS and exploit the technological capabilities of each class of MExE MS, with the use of varying 
services downloaded from the network, as required. 

The user shall be able to identify (either directly or indirectly) the user interface configuration he wishes to add, modify 
or delete on his MExE MS, and shall be offered the means of doing this. This management may be performed, for 
example, by a configuration capability profile. 

In taking this action, it shall be possible to determine whether the user interface configuration is already resident on the 
ME, or whether it requires to be obtained from the SIM or the network. The modifications which may be requested by 
the user could result in, for example, differing display characteristics being employed, redefinition of keys, modification 
of the "look and feel" of the user interface, touch screen facility, extensions to existing functions or the capability to 
automate some functions. 

The control of the "look and feel" of MExE applications and applets to customise their level of functionality and 
appearance may be possible by the MExE service provider, network operator (where the MExE service provider is not 
the network operator) and the user. The aspects of the application or applet which may be customisable are determined 
by the MExE service provider as an integral part of the MExE application or applet. 

The user interface configuration management which is specific to the ME shall be stored on the ME, and user interface 
configuration management which is generic to ME's may be stored in the network or on the SIM. 
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The definition of the user interface configuration management which may be offered to the user is outside the scope of 
this service description. 

6.2.2 Service management 

MExE shall provide the ability to customise the range of services offered to the subscriber. The subscriber's ability to 
configure the services available on the MExE MS shall be dynamic, as the range of services required may differ 
depending on the network, time and location that the user finds himself in. For example, a subscriber may require access 
to services offering financial support when attending a business meeting, however later in the day he may need access to 
travel information and booking facilities when re-arranging his travel home. 

A common address across all PLMN supporting MExE shall be available, from which the user shall be able to request 
the range of MExE services available he is registered in, if the PLMN supports MExE. The downloading of services 
may be autonomously controlled by the MExE MS to update existing service access on the mobile, or to download new 
services. The management of these services may be defined by the subscriber directly or under the control of the MExE 
MS's capabilities organised on the MExE MS (i.e. a user may be particularly interested in unified messaging services, 
and require the availability of such services to be made available to him). 

The user shall be able to determine and manage which MExE applications, applets and content may be transferred to the 
MExE MS (i.e. in terms of their security level, source of the applications etc.), determine and manage which MExE 
applications, applets and content are currently resident and usable on the MExE MS (e.g. when roaming some services 
may not be available to the user), and delete MExE applications, applets and content on the MExE MS. 

The definition of the applications, applets and content which may be offered to the user is outside the scope of this 
specification. 

6.3 Requirements description from the MExE service provider's 
standpoint 

6.3.1 Transfer of applications, applets and content 

A common mechanism shall be available to perform the transfer of applications, applets and content between MExE 
MSs' and the MExE service provider. 

The common transfer mechanism shall permit applications, applets and content (according to the appropirate MExE 
Sercurity Level) to be transferred to the MExE MS. 

It shall be possible for the MExE service provider to:- 

transfer applications, applets and content between the MExE MS and the MExE service provider (which may be 
initiated by either party); 

- request the version of applications, applets and content on the MExE MS; 

- identify the MExE MS' capabilities; 

support a request from the MExE MS for information on the (local) services which may be transferred from the 
network. 

Some of these functions may be used by the MExE service provider either individually, or together to automatically 
update previously transferred services. 

6.3.2 Network node types 

The introduction of MExE shall enable an expansion of services available to the user from various network node types. 

The MExE MS shall be able to communicate with the various network node types in the MExE service environment, 
allowing access to intelligent nodes to process service requests from the MExE MS. 
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6.3.3 Subscriber data 

Subscription to MExE services shall be logically separate to subscription of GSM services. A subscriber may have a 
MExE subscription to multiple MExE service providers. It may also be possible for the subscriber to interrogate such 
subscription registration (with a suitable means of authorisation), depending on PLMN support. 

6.3.4 Roaming subscribers 

Roaming MExE subscribers shall be able, as far as possible, to access their normal MExE services in their HPLMN. 

As usual when roaming, it cannot be ensured that the VPLMN can provide the subscriber access to the same MExE 
services (e.g. applications, applets and content) as he is accustomed to. However, in the VPLMN additional MExE 
services may be available, depending on network capabilities. Service continuity when roaming is dependent on the 
availability of the services in the VPLMN, and is outside the scope of this specification. 

The operation of the transferred applications, applets and content may be location dependent, and their behaviour when 
in an different location is outside the scope of this specification. 

The following forms of MExE subscriber roaming are identified: - 

- roaming between networks (HPLMN -^ VPLMN); 

- roaming between visited networks (VPLMN -^ VPLMN); 

- regional roaming within a network (within the HPLMN or VPLMN). 

There may be a need to distinguish between the above types of roaming from a MExE services management perspective, 
as the operation of location dependent MExE services may be affected when the MExE subscriber roams beyond the 
boundaries of a PLMN or region. 
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MExE bearer requirements 



The MExE execution environment is isolated from the network specific bearers by the transport protocol. This clause 
addresses the basic requirements for bearer services which are of fundamental importance and dictate the type of service 
offered to the MExE transport protocol. 

The characteristics of some existing different bearer services are presented in Table 1, and the emergence of additional 
bearers is foreseen with the evolution of UMTS. 

Table 1 : Characteristics of bearer services 



Bearer 
Category 


ExampI 
e 


Chan 
nel 


Bitrate 
(bit/s) 


Latency 
(ms) 


Layer 3 

Message 

max. 

length 
(octets) 
see note 


Message 
delivery 


Endpoint 
(IWS-?) 


Concurrency 
with CS-call 


Example 
usage 


Message- 
based 

(connectionless 

) 


SMS 
(PTP) 


SDCC 

H 
SACC 

H 


660 
150 


240 
480 


140 


store and 
forward 


SMSC 


yes 


messagin 
g services 


SMSCB 


CBCH 


44 


N/A 


83 


broadcast 


BSC 


GPRS 


PDCH 


nxSOOO 


20 


1500 


direct 


SGSN 


dependent on 
mobile and 

network 
capabilities 


Internet 
WWW 
access 


Message- 
based 

(connection 
oriented) 


USSD 


SDCC 

H 
FAGG 

H 


660 
1100 


240 
120 


160 


MSC, 

VLR, HLR 

or other 

PLMN 

node 


yes 


TeleVAS 


UUS 


128(32) 


other MS 


GNAP 


Circuit-based 

(connection 
oriented) 


HSCSD 


TCH 


nx9600 
nx 14400 


N/A 


N/A 


N/A 


other end 


no 


FTP 


NOTE: that the indicated message lengths do not reflect the capability for concatenation or compression of 
messages for specific bearers 



The user is not expected to access the bearer directly, but to do so via a MExE transport API. All bearers may not be 
available in all implementations. 

The MExE transport protocol shall have access to a range of bearer services, including support of telecom-related 
services and data-related services. Telecom-related services are carried out between the MExE MS and the MSC, VLR, 
HLR, SCP or other operator-managed GSM/UMTS nodes in the network. Data-related services are mainly carried out 
between the MExE MS and an interworking function or a gateway node to external networks. 

Some applications require a bearer which can operate both without an ongoing call (stand-alone) and in parallel with a 
circuit switched call, whereas other applications do not require bearer operation in parallel with a circuit switched call. 
The MExE transport protocol shall have access to both types of bearers. 

In order to support a wide variety of applications, the MExE transport protocol shall have access to both connection- 
oriented and connectionless bearers. Likewise, both message-based and circuit-based bearers shall be available. 

The integrity of the bearers must be assured to ensure their capability to correctly and properly transfer applications and 
applets between the MExE service provider and the MExE MS. 
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8 MExE protocols requirements 

In order for MExE to be supported over the network, a set of standardised protocols is required to support interaction 
between the MExE MS and the MExE service environment. 

As this specification is not required to propose a specific technology, it identifies the MExE protocols requirements 
from the service subscriber's and user's standpoint. The MExE protocols refers to any protocol layer above the 
GSM/UMTS bearers, which interfaces between the MExE service environment and the MExE MS. 

The functional capabilities, information flows, signalling system protocols and switching functions needed to implement 
the service described in this Stage 1 specification will be identified by subsequent specifications at the Stage 2 and Stage 
3 levels. 

The high level MExE protocols requirements are identified in the subsequent subclauses. 

8.1 Optimised Wireless Access 

A primary goal of MExE is to provide access to Internet and Intranet services, the standard Internet applications, 
security and transport protocols shall be one possible set of MExE protocols which is supported. It is noted that these 
protocols may not cover all the requirements identified in this specification for all classes of ME's. 

A set of application, security and transport protocols optimised for wireless access, and compliant to MExE 
requirements, shall be specified and form part of the MExE standards. 

MExE MS's shall be able to support either or both of these sets of protocols. 



8.2 Wireless network independence 



The upper layers of the MExE protocols shall be independent of the type of underlying wireless network so that 
applications and applets do not need to take into account the specific nature of networks. In particular, lower layers shall 
provide a generic access API to network bearers so that application and applet developers do not have to cater for the 
supported underlying bearers. It shall be possible for applications and applets to request specific bearer services and be 
notified accordingly if they are not available. 

The transport layer of the MExE protocols may however be adapted to support the specific features of the underlying 
bearers. The MExE protocols shall have the ability to use all the underlying bearer services which the MExE MS is 
capable of supporting. 

8.3 Scaleable and extendible protocols 

The MExE protocols shall support a scaleable and extendible environment for application and applet development in 
mobile communication devices. It shall provide a set of generic, non-MS or service-dependent, features. Scaleability of 
the MExE protocols applies to both the MExE MS (e.g. where simple devices do not require the extensive protocols 
support possibly required by more sophisticated devices) and the network. 

The MExE protocols shall support both low bandwidth bearers (e.g. SMS, USSD etc.) as well as medium bandwidth 
bearers (e.g. anything up to 64kb/s, HSCSD, UMTS). The introduction of new bearers shall be supported, allowing 
applications and applets to automatically benefit from their capabilities. 

The MExE protocols shall support existing servers and applications and applets, and provide a stable platform for future 
application development. 



8.4 Service independence 



The MExE protocols shall be independent of the services communicated over the protocols. The modification in the 
range of services, or addition of new services, offered over the network shall not be restricted by the MExE protocols. 
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8.5 Network node type independence 

The MExE protocols shall be independent of the network node type(s) being communicated with over the protocols. The 
MExE protocols shall support the evolution of network node types in a PLMN. 

8.6 Enquiry and notification of IVIExE capabilities 

The MExE protocols shall support a generic technology-independent means for the notification by the MExE MS to a 
MExE server, or enquiry from the MExE server to the MExE MS, of the supported MExE capabilities consisting of: 

MExE Classmark (mandatory, MExE server -<-^- MExE MS); 

the supported class of MExE MS; 
MExE technology (mandatory, MExE server <-^ MExE MS); 

the supported types of MExE MS technology to support MExE services; 

terminal characteristics (optional, MExE MS -^ MExE server, following MExE server enquiry); 

further details of the supportable characterstics (i.e. screen size, MMI capabilities, supportable bearer 
services, toolkits etc. as constrained by the network, terminal, subscription and user preferences). 

In existing networks it may not be possible to determine the network capabilities (i.e. supported bearers) and 
subscription options of the subscriber. 

The above notification by the MExE MS or the MExE server are supported at service initiation, dynamically during the 
provision of such a service, and following a change in the quality of service (i.e. following a handover, change of 
network, degradation of service, change in quality of service). 

The notification mechanism shall flexibly support notification of the MExE MS, and be able to accommodate future 
evolution of MExE MS equipment. 

8.7 IVIS request of services information 

The MExE protocols shall support a notification from the PLMN or a request from the MExE MS to the PLMN, for 
information on the (local) services which may be transferred from the PLMN. The information from the PLMN may 
take the form of listing the services, or references to a PLMN entity (either internal or external to the PLMN) where the 
available services may be determined. 



8.8 Support of transfer protocols 



The MExE protocols shall support the capability to transfer new applications and applets to the MExE MS as required. 
The protocols shall support both user initiated and MExE server initiated transfer of several types of data (content 
description pages, procedural logic, images, libraries etc.), and be able to indicate the type of data being transferred. 

Each specific MExE technology shall be support a a standardised transfer mechanism for that MExE technology. 
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9 MS application execution environment requirements 

9.1 IVIS platform independence 

In order to support the objectives of MExE, the ME and SIM is required to have an architecture capable of supporting 
applications, applets and content in a standardised execution environment, independently of the MExE MS 
manufacturer. 

As this specification is not required to propose a specific technology, it identifies the common platform requirements 
from the service subscriber's and user's standpoint. 

The limitations of small devices may result in the provision of the full application execution environment only being 
available in sophisticated devices. 

The high level execution environment requirements are identified in the subsequent subclauses. 

9.2 Document mark-up language and other coding formats 

In order to cater for a wide variety of ME's with different display and input capabilities, support for both the standard 
Internet mark-up language and a content description language optimised for small display devices of low bandwith 
bearers shall be defined with the MExE specifications. Both languages may be implemented on any MExE MS. 
Standardised ways of coding content (i.e. images, phonebook, calendar etc.) shall be defined, however the support of 
such standardised content coding is optional. 

In order to facilitate global use of MExE services, a standardised range of character sets for MExE services requires to 
be defined, and the capabilities of the user and applications to use them. 

9.3 MExE APIs 

MExE APIs may be defined covering aspects (e.g. Network APIs, Non-network API's, Terminal APIs etc.) within a 
given MExE Classmark of MExE MS (ME an/or SIM), and the MExE MS shall support a core API to support the 
execution of MExE applications and applets. The core API is a the minimal set of API that is present on all MExE 
MS's, providing the MExE execution environment in which applications and applets can execute, and is known as the 
Core MExE API. The Core MExE API consists of generic and GSM/UMTS specific aspects. 

Applications and applets which have been designed to execute in this Core MExE API environment (and the optional 
GSM MExE APIs subsequently identified), will provide additional functions to the MExE MS. 

In addition to the Core MExE API on an MExE MS, standardised MExE API extensions such as Network API (e.g. 
access to call control services, SMS etc.). Non-network GSM/UMTS-defmed services API (e.g. security aspects, SIM 
phonebook etc.). Terminal API (e.g. power management, access to alerting function, phonebook, MMI, smartcard 
access etc.), shall be subsequently defined and may be supported by the MExE MS in order to further exploit GSM's 
capabilities. 

The standardised MExE API extensions shall include access to mobility information. 
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10 Charging requirements 

The use of MExE services shall, at MExE service provider determination, be subject to charging. 

There are several forms of charging which shall be available to the MExE service provider. It shall be possible for the 
MExE service provider to charge in the following instances:- 

subscription; 

the subscriber's registration to use MExE services may be subject to a charge; 
service transfer; 

the transfer of services and/or information to a subscriber's MExE MS may be subject to a charge; 

service upgrading; 

the upgrading of previously transferred services to a subscriber's MExE MS may be subject to a charge 
(automated upgrading of services may be subject to a different charge); 

service usage; 

the usage of transferred services by a subscriber's MExE MS may be subject to a charge (possibly use either 
internal to, or external to, the MExE MS); 

- roaming ; 

the usage of MExE services by a subscriber's MExE MS when roaming may be subject to additional charges; 

A standardised means of transferring (indicative and/or final) charging information (for the use of MExE services) from 
the MExE service provider to the MExE MS shall be defined. 

The usage of the bearer service may be subject to a charge (i.e. possibly time-based, volume-based, event-based etc.) by 
the network operator. 

Normal service charges may additionally apply when using MExE services and incurring the above charges. 

Other charging requirements may be identified in due course. 

1 1 Security requirements 

This clause consists of: 

a sub-clause giving the principles behind security for MExE. These are not requirements as such but the 
principles behind the requirements; 

a sub-clause specifying specific requirements that MExE implementations must adhere to; 

a sub-clause specifying the security domain classifications for MExE executables. 
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11.1 Security Principles 



(a) The ME and the data therein are the property of the user. The user is also responsible for the payment of chargeable 
events involving her MS, and will be seen as the party responsible for any events (whether chargeable or not) 
involving her MS. Therefore the user shall have full control over all chargeable and non-chargeable events initiated 
by her MS ("event" includes responses made by the MS to external events, e.g. the acceptance by the MS of an 
incoming call). This control can be exercised either by the giving of explicit permission at the time of the event or 
by the giving of implicit permission to the events by the agreement to an event schedule listed clearly in a user 
profile. 

(b) The user shall be able to request the logging of specific network events initiated by MExE MS applications/applets. 

(c) The privacy of user data in the MS is of paramount importance. 

(d) The SIM and operator controlled areas within the terminal are the property of the network operator. The network 
operator shall therefore have full control over access to the SIM and operator controlled area The operator shall 
also have full control over data, excluding personal user data, transmitted to or from the SIM and the operator 
controlled terminal area and all events initiated by the SIM or operator controlled area ("event" includes responses 
made to external events, e.g. the response to a command sent from the ME). 

(e) As the user cannot know the capabilities of any MExE executables transferred from a MExE service environment 
before transfer, the MS MExE environment shall ensure that transferred MExE executables cannot compromise the 
above principles. 



1 1 .2 Security Requirements 



1. For MExE executables of security operator, manufacturer and user trusted domains , as defined in clause 11. 3, it 
shall be possible to authenticate the identity of the body that authorised the application, applet or content. 

2. There shall be a secure, unforgable means for assigning the security domains defined in section 11.3 to the MExE 
executables transferable from the MExE service environment. 

3. The certification of authorisation associated with MExE executables transferable from the MExE service 
environment shall be transferred with the certified material. 

4. The MExE MS shall be able to verify the security domain, as defined in section 11.3, of MExE executables 
transferred from the MExE service environment. 

5. The verification process in the MS itself shall not compromise the security of the functionality and content in the 
MS 

6. Transferred material that fails verification shall not be installed and shall be deleted by the terminal as soon as 
possible. 

7. MExE executables that cannot be verified due to the absence of required verification information in the MS, shall 
be considered as untrusted material, as defined in section 1 1.3. 

8. The events that MExE executables are given permission by the user to initiate shall be securely recorded in the user 
profile. 

9. There shall be mechanisms within the MExE MS for ensuring that applications cannot have access to MS 
functionality and content beyond that allowed by their security domain, as defined in section 11.3. 

10. It shall be possible to for the user to downgrade MExE executables of operator, manufacturer or user trusted domain 
status to untrusted status, at installation or at any other time. 

1 1 . The MExE MS shall be able to detect if MExE executables transferred from the MExE service environment have 
been modified since they were assigned a security level. 

12. MExE executables shall not be transferred to a MExE MS without the explicit permission of the MS user 
immediately prior to transfer or implicit permission via the user profile. 
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13. Applications and applets transferred to a MExE MS shall not be able to initiate events without the explicit 
permission of the MS user immediately prior to event initiation or implicit permission via the user profile. 

14. The user profile data for transfer and event initiation cannot be changed without the explicit agreement of the user. 

15. The user shall be able to abort or suspend any on-going call that has been set up automatically by an application. 

16. The integrity of the SIM and existing GSM security mechanisms shall not be compromised by the introduction of 

MExE services. 

17. The user shall be able to request the logging of specific network events initiated by MExE MS applications/applets. 

18. MExE MS applications/applets shall not be able to send command RUN GSM ALGORITHM to the SIM. 



1 1 .3 Security domain classifications 



The security domain of MExE executables shall be graded according to the measure of authorisation which they have 
been designated. The following 3 (the "sandbox" in which untrusted MExE executables runs is not considered to be a 
domain) domains shall be supported for MExE executables: 

MExE Security Operator Domain (used by the HPLMN operator); 

MExE executables designated at this security domain have been authorised by the network operator (i.e. 
HPLMN), 

MExE Security Manufacturer Domain (system MExE executables); 

MExE executables designated at this security domain have been authorised by the MExE MS manufacturer. 

MExE Security User Trusted Domain (trusted applications, applets and content); 

MExE executablesMExE executables designated at this security domain have been written by user trusted 
software developers and verified as user trusted domain material (but not with regard to their content) via 
organisations such as certification authorities. 

MExE Security Untrusted (untrusted applications, applets and content); 

Untrusted MExE executables have not been supplied with an associated authorisation, or the authorisation 
cannot be verified due to the absence of required verification information in the MExE MS. 



12 Interworking with other network features 

All services available in the network shall continue to be offered in addition to MExE. This includes the basic services, 
supplementary services and network features. 

It shall be network-determined whether specific MExE services supplement, co-operate with, or supersede the network 
available services, when a user is subscribed to MExE and has transferred the specific MExE service. 

The interworking characteristics of individual MExE services with other network features is outside the scope of this 
specification. 



13 Network interworking 



All services offered in co-operation with other networks shall continue to be offered in combination with MExE. This 
includes the basic services, supplementary services and network features. 

The interworking characteristics of individual MExE services with other networks is outside the scope of this 
specification. 
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Annex A (informative): 
Change history 



Change history 


SMG No. 


TDoc. No. 


CR. No. 


Section 
affected 


New version 


Subject/Comments 


SMG#29 


P-99-372 


AOOl 


3.1 


7.1.0 


The review of the MExE Stage 2 resulted in the conclusion 
that a (WAP) script, from a point of view of an executing 
programme, should also be considered to be an appUcation. 
The definition for application is modified accordingly. 


SMG#29 


P-99-372 


A002 


3.1 


7.1.0 


The review of the MExE Stage 2 resulted in the conclusion 
that the term MExE protocols used in the MExE Stage 1 in 
fact refers to all layers above the GSM/UMTS bearer. The 
MExE Stage 1 is modified accordingly. 


SMG#29 


P-99-372 


A003 


11 


7.1.0 


Complete replacement of security section, following review 
by SMGIO and discussion between SMGIO and SMG4. 
Changes term "security level" to "security domain". Changes 
term "apphcations, applets and content" to "MExE 
executables" 
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